2. For example, if I have 100 uniq stacks per multiple projects, I can accidentally destroy/modify wrong project/stack. Is there any access control/RBAC in place that I can use per project? (I use Azure or AWS as a backend)

this is not available in the OSS backends due to limitations at the object store layer. If this is a requirement, I’d suggest using the service 🙂